ASSISTANT DIRECTOR OF INFORMATION TECHNOLOGY - INFORMATION SECURITY OFFICER

Durham County Government employs approximately 1,900 employees that work towards providing needed services throughout the community. With a wide array of services, Durham County Government is at the heart of a rapidly growing and diverse area offering residents, employees and visitors exciting opportunities to live, work, grow and play. For more information about Durham County Government, visit www.dconc.gov.

 

 

DEPARTMENT:       

 

Information Services & Technology

DATE POSTED:         

   

February 25, 2025

CLOSING DATE:           

 

March 25, 2025

HIRING RANGE:

 

$109,621 - $147,923

POSITION NUMBER:        

    

40009103

JOB TYPE:

Full-Time, (37.5 hrs)

 

 

 

GENERAL DESCRIPTION:

This position oversees the County’s information, cyber, and technology security. The position is responsible for developing, executing, and maintaining the County’s cybersecurity strategic plan, ensuring alignment with business objectives and regulatory requirements. The role works closely with the Director/Chief Information Officer (CIO) to establish and maintain the enterprise strategy and architecture with a multi-year roadmap to safeguard the County’s digital assets. The role directs countywide information security and privacy efforts, ensuring compliance with HIPAA (Health Insurance Portability and Accountability Act) and other regulatory frameworks while fostering a culture of cybersecurity awareness. The position requires strong leadership to drive interdepartmental compliance, integrate security best practices, and manage a high-performing security team.

 

DUTIES AND RESPONSIBILITIES:

• Develops and maintains an enterprise-wide information security program, including policies, procedures, and controls to protect critical data, infrastructure, and information assets.
• Works with the Director/CIO to establish and execute a multiyear cybersecurity strategy and roadmap.
• Ensures alignment of security goals with the department’s business plan, overseeing the development, execution, and updates of the cybersecurity strategic plan.
• Directs countywide information security efforts through departmental security professionals.
• Oversees Information Technology (IT) security policies, including disaster recovery, vulnerability management, and regulatory compliance.
• Coordinates and ensures compliance with HIPAA security requirements across County departments.
• Establishes continuous monitoring, auditing, and compliance re